MAITS Service Catalog · 34 Defined Services

Specialist depth.
From leadership to implementation.

Explore our complete catalog of 34 services spanning identity and access management, Microsoft Entra, cyber security, Zero Trust architecture, website & digital services, platform delivery packages, penetration testing, and technical leadership.

Organised around outcomes

Every service delivers an explicit, verifiable control outcome—supported by senior architectural depth, proven delivery frameworks, and defensible audit evidence.

Service Directory (01 — 34)

Explore the complete MAITS service catalog.

Filter by domain or search by keyword to locate the exact technical or advisory capability required for your programme.

Showing all 34 services
01Cyber Security & Zero Trust

Security Consulting

Strategic & Technical Security Advisory

Comprehensive cybersecurity consulting for New Zealand and Australian enterprises. We align security posture with business risk, regulatory obligations (NZISM, PSR, ISO 27001, Essential Eight), and executive governance.

  • Security posture review
  • Regulatory control mapping
  • Target security architecture
  • Remediation roadmap
  • Executive risk briefings
Explore service
02Identity & Access Management

IAM Consulting

Enterprise Identity Advisory & Operating Models

Senior advisory across workforce, customer, privileged, and partner identity. We design identity operating models, governance structures, and technology roadmaps that turn identity into a core business enabler.

  • IAM strategy blueprint
  • Identity operating model
  • Current-state gap assessment
  • Platform evaluation
  • Multi-year investment roadmap
Explore service
03Identity & Access Management

IAM Architecture

Defensible Enterprise Identity Architecture

Enterprise and solution architecture for complex identity estates. We define source authority, synchronization topologies, authentication boundaries, federation standards, and least-privilege access models.

  • High-level & detailed architecture
  • Source authority matrix
  • Federation & protocol designs
  • Security control specifications
  • Architecture decision records (ADRs)
Explore service
04Cyber Security & Assurance

Security Assessments

Evidence-Based Security Maturity & Risk Reviews

Rigorous technical reviews of cloud estates, infrastructure boundaries, application environments, and security controls against recognized security standards, threat models, and regulatory baselines.

  • Security maturity scorecards
  • Threat & exposure analysis
  • Prioritised remediation backlog
  • Executive summary & technical findings
  • Defensible audit evidence
Explore service
05Assurance & Assessments

IAM Assessments

Comprehensive Identity Maturity & Control Audits

Deep assessment of your complete identity estate—from Active Directory and Entra ID to lifecycle automation, role engineering, privileged accounts, and SaaS application integrations.

  • IAM maturity matrix
  • Identity risk register
  • Dormant & orphan account analysis
  • Lifecycle workflow evaluation
  • Remediation action plan
Explore service
06Platform Packages & Managed

Managed Hosting Services

Hardened, Secure Managed Web Hosting

High-security managed cloud hosting in Microsoft Azure for business-critical websites, brochure portals, and lightweight applications with continuous patching, uptime monitoring, and hardening.

  • Hardened Azure deployment
  • Automated patching & maintenance
  • SSL/TLS & DNS management
  • Proactive uptime monitoring
  • Monthly operational reporting
Explore service
07Platform Packages & Managed

Platform Package - Tier 1: Foundation

Rapid Identity & Security Tenant Baseline

Turnkey tenant architecture and baseline hardening for Microsoft Entra ID. Establishes emergency break-glass procedures, core Conditional Access, MFA enforcement, and initial hygiene controls within weeks.

  • Core Entra tenant setup
  • Standard Conditional Access baseline
  • MFA & basic phishing resistance
  • Break-glass account procedures
  • Initial health check & configuration guide
Explore service
08Platform Packages & Managed

Platform Package - Tier 2: Enhanced

Advanced Governance, PIM & Phishing Resistance

Extends foundational controls with Entra Privileged Identity Management (PIM), phishing-resistant passkey authentication, automated lifecycle workflows, entitlement management, and hybrid directory sync.

  • Entra PIM & JIT activation
  • FIDO2 / passkey rollout pilot
  • Access packages & entitlement catalogs
  • Automated JML workflows
  • Hybrid directory synchronization & auditing
Explore service
09Platform Packages & Managed

Platform Package - Tier 3: Capability Transfer

Enterprise Transformation & Operational Transfer

Full-scale enterprise identity transformation designed for critical infrastructure, government, and large enterprises. Includes custom SCIM integrations, deep SIEM monitoring, runbooks, and hands-on team coaching.

  • Comprehensive target architecture
  • Custom SCIM & Graph connectors
  • Sentinel & SIEM identity telemetry
  • Complete operational runbooks
  • Knowledge transfer & engineering coaching
Explore service
10Platform Packages & Managed

3-Year Managed Services

Long-Term Identity Stewardship & SLA Operations

Continuous, retained operational stewardship of your Microsoft Entra, IAM, and cloud security platform. Includes quarterly architecture reviews, proactive configuration maintenance, and guaranteed priority incident escalation.

  • Quarterly architecture health reviews
  • Proactive policy & sync maintenance
  • Priority escalation & tier 2/3 engineering support
  • Ongoing feature evaluation & adoption
  • Audit & compliance evidence packages
Explore service
11Migration & Verification

Verified ID Integrations

Verifiable Credential & Decentralized Identity Solutions

Architectural design and production deployment of Microsoft Entra Verified ID, W3C Verifiable Credentials, OpenID4VCI, OpenID4VP, and DiligenceID integrations for tamper-evident digital onboarding and role attestation.

  • Verified ID issuer & verifier setup
  • Credential schema & display definitions
  • Application & portal API integration
  • Privacy impact & trust framework review
  • Pilot validation & production cutover
Explore service
12Migration & Modernisation

Microsoft External Entra ID Migrations

Seamless Transition to Modern Customer Identity

Proven migration framework to transition complex customer and partner portfolios from legacy authentication systems and Azure AD B2C to next-generation Microsoft Entra External ID without user disruption.

  • Tenant readiness assessment
  • User store & attribute schema migration
  • Custom authentication extensions
  • Application redirection & token mapping
  • Staged user cutover & communication plan
Explore service
13Migration & Modernisation

B2C Decommissioning

Controlled Retirement of Legacy Azure AD B2C

Safe, audited teardown and decommissioning of retired Azure AD B2C tenants. We verify data extraction, audit trail preservation, DNS and vanity domain migrations, dependency severing, and contract closure.

  • Decommissioning checklist & risk gate
  • Full user data extraction verification
  • Custom policy & key archival
  • DNS cutover & reverse-proxy retirement
  • Formal completion certificate
Explore service
14Identity & Access Management

CIAM

Customer Identity & Access Management Architecture

Design frictionless, secure consumer and citizen identity journeys. We balance user experience, privacy regulations, fraud prevention, social and enterprise federation, and self-service lifecycle management.

  • Customer journey blueprints
  • Passwordless & passkey customer auth
  • Consent & progressive profiling model
  • Federation architecture (OIDC/SAML)
  • Self-service recovery & account linking
Explore service
15Identity & Access Management

IGA

Identity Governance & Administration

Make access explainable and removal routine. We deploy Microsoft Entra ID Governance, lifecycle workflows, automated access packages, periodic certification campaigns, and segregation of duties (SoD) policies.

  • Joiner-Mover-Leaver automation
  • Entitlement catalog & access packages
  • Automated access certification reviews
  • Segregation of Duties (SoD) matrices
  • Auditable compliance reporting
Explore service
16Identity & Access Management

PAM

Privileged Access Management & Zero Standing Privilege

Eliminate standing administrative privileges across cloud and hybrid environments. We design administrative tiering (Tier 0 / Control Plane), break-glass procedures, session recording, and credential vaulting.

  • Privilege discovery & exposure mapping
  • Tier 0 administrative architecture
  • Break-glass emergency procedures
  • Hardened administrative workstation specs
  • Privileged operations runbooks
Explore service
17Identity & Access Management

PIM

Microsoft Entra Privileged Identity Management

Configure and operationalise Microsoft Entra PIM for Entra roles, Azure resource roles, and PIM for Groups. Implement just-in-time (JIT) activation, mandatory justification, approval gates, and time-bound access.

  • PIM role eligibility matrix
  • Multi-stage approval workflows
  • Activation duration & MFA policy
  • PIM for Groups entitlement designs
  • Activation telemetry & audit dashboards
Explore service
18Architecture & Leadership

Strategy and Roadmap

Multi-Year Technology & Security Blueprints

Align enterprise technology, cyber security, and identity investments with executive business outcomes. We deliver prioritized, multi-phase transformation roadmaps grounded in practical delivery capacity.

  • 3-to-5 year strategic technology blueprint
  • Phased capability maturity roadmap
  • Investment & licensing business cases
  • Vendor & platform selection criteria
  • Executive stakeholder consensus
Explore service
19Cyber Security & Assurance

Digital Forensics & Incident Investigation

Identity Breach Investigation & Forensic Analysis

Specialist incident response and forensic analysis for identity compromises, token replay attacks, unauthorized privilege escalation, and cloud tenant intrusions. Defensible evidence collection and rapid containment.

  • Root cause analysis (RCA) report
  • Attack timeline & blast radius reconstruction
  • Forensic evidence chain of custody
  • Remediation & containment guidance
  • Post-incident hardening roadmap
Explore service
20Cyber Security & Assurance

Penetration Testing

Identity & Cloud-Focused Penetration Testing

Offensive security testing focused on identity attack paths, Entra ID misconfigurations, hybrid privilege escalation, web applications, and API security. Real-world adversary simulation without operational damage.

  • Executive risk summary
  • Technical vulnerability report
  • Reproducible attack chains (PoC)
  • Prioritised remediation instructions
  • Post-remediation verification testing
Explore service
21Architecture & Leadership

Technical Leadership / Fractional CTO-CISO

Executive Technical & Security Leadership on Demand

Senior fractional CTO and CISO expertise for high-growth firms, enterprise modernization programmes, and government agencies. We take ownership of technical strategy, governance, architecture, and board reporting.

  • Technical steering & design authority
  • C-suite & board risk reporting
  • Architecture review board (ARB) leadership
  • Vendor negotiation & technical oversight
  • Engineering team mentoring
Explore service
22Cyber Security & Zero Trust

Cyber Security Architecture / Zero Trust

Pragmatic Zero Trust Security Architecture

Architect defensible security boundaries based on the core Zero Trust principles: verify explicitly, use least-privilege access, and assume breach. Micro-segmentation, software-defined perimeters, and continuous validation.

  • Zero Trust architecture blueprint
  • Micro-segmentation & trust boundaries
  • Continuous verification policy designs
  • Data classification & egress controls
  • Zero Trust maturity roadmap
Explore service
23Identity & Access Management

Microsoft Entra

Microsoft Entra Tenant Design & Modernisation

End-to-end design and optimization of your Microsoft Entra ID tenant. We configure authentication strengths, Conditional Access policies, external collaboration, workload identities, and operational telemetry.

  • Tenant architecture blueprint
  • Conditional Access policy matrix
  • Workload identity federation
  • Cross-tenant access policies
  • Operational monitoring & alert rules
Explore service
24Identity & Access Management

Hybrid Identity / Active Directory

Active Directory & Entra Hybrid Synchronisation

Engineering and modernisation of hybrid directory infrastructures. We deploy Entra Connect and Cloud Sync, manage source authority, resolve synchronization loops, and manage Exchange identity dependencies.

  • Hybrid directory topology design
  • Entra Cloud Sync deployment
  • Attribute mapping & filtering rules
  • Password hash sync & writeback setup
  • Staging & cutover validation
Explore service
25Identity & Access Management

Passkeys & Identity Security

Phishing-Resistant FIDO2 & Passkey Rollout

Replace vulnerable passwords and SMS MFA with phishing-resistant passkeys and FIDO2 security keys. We engineer the complete lifecycle: registration, bootstrap with TAP, device binding, and safe recovery.

  • Passkey strategy & cohort planning
  • Authentication strength policies
  • Bootstrap & Temporary Access Pass (TAP) flows
  • Account recovery & lost-device runbooks
  • Pilot execution & rollout support
Explore service
26Identity & Access Management

Application Identity & Provisioning

Standards-Based SSO, SCIM & API Integration

Seamlessly integrate SaaS, custom, and legacy applications into your identity control plane using OIDC, OAuth 2.0, SAML 2.0, SCIM 2.0 automated provisioning, and custom Microsoft Graph connectors.

  • Application onboarding architecture
  • SCIM automated provisioning endpoints
  • SAML/OIDC SSO configurations
  • API token & scope authorization models
  • Deprovisioning reconciliation tests
Explore service
27Cyber Security & Architecture

Azure Cloud Security

Identity-Centric Azure Workload & Platform Hardening

Protect Azure cloud environments with identity-first guardrails. We implement managed identities, Key Vault HSMs, Azure Policy guardrails, Defender for Cloud, and private network perimeter architectures.

  • Azure security landing zone baseline
  • Managed identity migration plan
  • Key Vault & secret management policy
  • Azure Policy governance definitions
  • Sentinel & Defender integration
Explore service
28Migration & Verification

Digital Identity Strategy & Architecture

Decentralized Trust Models & Reusable Evidence

Design sovereign, privacy-preserving digital identity ecosystems using verifiable credentials, digital wallets, selective disclosure, and interoperable open standards (W3C VC 2.0, SD-JWT, ISO 18013-5).

  • Digital trust ecosystem architecture
  • Credential schema & lifecycle designs
  • Issuer, holder, verifier trust models
  • Privacy impact assessment (PIA)
  • Standards interoperability profile
Explore service
29Migration & Verification

DiligenceID

Enterprise Verifiable Credential Platform

MAITS' proprietary digital credential product enabling instantaneous verification of qualifications, licenses, authority, and identity evidence directly from user devices without third-party surveillance.

  • DiligenceID platform licensing
  • Rapid verification widget integration
  • Custom credential issuance templates
  • Hardware-bound wallet attestation
  • Audit-ready verification logs
Explore service
30Assurance & Assessments

IAM Health Check

Rapid Diagnostic Review of Identity Security & Hygiene

A fast, structured diagnostic of your Microsoft Entra ID and Active Directory estate. We analyze tenant configuration, legacy protocols, privilege sprawl, and MFA coverage to uncover immediate vulnerabilities.

  • Executive risk summary
  • Technical scorecard across 6 domains
  • Top 5 critical remediation priorities
  • License utilization optimization
  • Follow-up briefing with Lead Architect
Explore service
31Architecture & Leadership

Advisory Hours / Retained Advisory

Flexible Specialist Access & Design Authority

On-demand specialist consulting hours or recurring monthly advisory retainers. Gain direct, responsive access to senior identity architects and security engineers without the overhead of fixed-scope contracts.

  • Dedicated monthly advisory capacity
  • Rapid design reviews & ADR sign-offs
  • Emergency troubleshooting escalation
  • Vendor statement of work (SOW) reviews
  • Ongoing architecture steering
Explore service
32Assurance & Training

Workshops & Training

Tailored Stakeholder Alignment & Engineering Uplift

Facilitated alignment workshops and in-depth technical training for executive teams, architects, and engineering squads across Zero Trust, Entra ID, passkeys, RBAC engineering, and digital credentials.

  • Customized workshop curriculum
  • Facilitated decision & alignment sessions
  • Practical engineering lab exercises
  • Architecture decision documentation
  • Post-session capability action plan
Explore service
33Assurance & Training

Implementation Assurance / Technical Assurance

Independent Technical Verification & Readiness Gates

Independent third-party assurance of identity and security programmes delivered internally or by third-party systems integrators. We verify technical quality, control completeness, and operational readiness.

  • Independent architecture assurance review
  • Design vs build traceability audit
  • Control effectiveness test validation
  • Production cutover readiness assessment
  • Defensible assurance report for Steering Committee
Explore service
34Platform & Digital Services

Website & Digital Services

Modern Website Design, Managed Hosting & Digital Experience

MAITS designs, develops, hosts, secures and maintains modern websites and digital experiences for organisations of all sizes across New Zealand and Australia. Includes preferential rates for nonprofits via MAITS GoodWorks.

  • Custom responsive web design & development
  • Managed website hosting in Microsoft Azure
  • CMS dependency updates & routine security patching
  • Domain DNS assistance & TLS certificate lifecycle
  • WCAG accessibility reviews & speed optimization
  • Preferential charity rates via MAITS GoodWorks
Explore service

Capability map

Follow identity from source to trust decision.

MAITS spans identity, authentication, context, authorisation, provisioning, governance and assurance — with every hand-off designed as part of one control system.

01Identity
02Authentication
03Access
04Governance
05Credentials
06Trust

Ways to engage MAITS

Different problems need a different shape of help.

Use advisory hours for a focused need, an assessment or workshop for a bounded outcome, a Platform Package for predictable delivery, retained leadership for continuity, or delivery and assurance across a larger programme.

Start a conversation

Find the right starting point.

Bring the programme, risk, delivery problem or architecture decision. We’ll help turn it into a practical scope.